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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1.114, and the fee set 
forth in 37 CFR 1.17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1.114. Applicant's submission filed on June 1, 
2007 has been entered. 

Claim Rejections - 35 USC §103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

This application currently names joint inventors. In considering patentability of 
the claims under 35 U.S.C. 103(a), the examiner presumes that the subject matter of 
the various claims was commonly owned at the time any inventions covered therein 
were made absent any evidence to the contrary. Applicant is advised of the obligation 
under 37 CFR 1 .56 to point out the inventor and invention dates of each claim that was 
not commonly owned at the time a later invention was made in order for the examiner to 
consider the applicability of 35 U.S.C. 103(c) and potential 35 U.S.C. 102(e), (f) or (g) 
prior art under 35 U.S.C. 103(a). 
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Claims 1, 3, 6, 10, 12, 15, 19, 21, 24, 31-34, 36-41, and 57-59 are rejected under 
35 U.S.C. 103(a) as being unpatentable over Hunnicutt et al (US Patent #5,889,952) in 
view of Makinson et al (US Patent #6,971 ,023) in view of Klots et al (US Patent 
#6,920,475) in view of Phillips et al (US Patent #7,136,903). 

Claims 1, 10, and 19 disclose an information processing method, apparatus, and 
storage medium of controlling access to computer resources managed, by an operating 

L 

system in a computer comprising: a storing step of storing a management table in a 
storage medium, wherein the management table provides, for each computer resource 
managed by the operating system, access right information representing access rights 
for outputting each computer resource to another computer resource, and conditions 
under which the access right is validated; an interception step of intercepting an 
operation request for a first computer resource from a process, before the operation 
request is transferred to the operating system, and if the process holds the first 
computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource; a determination step of: monitoring a series of operation 
requests associated with the registered process and the registered computer resource 
to recognize when the series of operation requests, considered together, has the effect 
of outputting the registered computer resource to a second computer resource, 
retrieving from the management table access right information of the registered 
computer resource and access right information of the second computer resource and, 
determining whether the registered process has an access right for outputting the 
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registered computer resource to the second computer resource based on the access 
right information retrieved from the management table; a processing step of, if it is 
determined in the determination step that the registered process has the access right for 
outputting the registered computer resource to the second computer resource, 
transferring the operation request to the operating system and returning a result from 

i 

the operating system to the registered process; and a denial step of denying the 
operation request, if it is determined in the determination step that the registered 
process does not have the access right for outputting the registered computer resource 
to the second computer resource. Hunnicutt et al teaches an access control list, which 
can be associated to a single file, or a list of files, which contains information on which 
users have access and what types of rights are allowed to the specific user (column 4, 
lines 44-49, column 5, lines 15-19, figure 3), an access cache which keeps track of 
access to resources (column 5, lines 27-37), retrieving access information from a table 
(column 1, lines 54-59), a check system which compares the access rights based on the 
information retrieved (column 1, lines 54-59 column 5, lines 54-67), and since the 
request has access to the resource the resource is outputted (column 5, lines 54-67), if 
a matching access permission exists then access to the file is granted (column 5, lines 
58-61), and if no permission is granted an error message is generated to the user 
denying access (figure 5). It fails to teach intercepting an operation request for a first 
computer resource from a process, before the operation request is transferred to the 
operating system, and if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
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medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Makinson et al teaches scanning access requests prior to 
servicing by an operating system, the scanning includes requests for outputting a first 
resource to a second resource (column 4, lines 23-45). 

Hunnicutt et al and Makinson et al are analogous art because they are both 
related to controlling access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Makinson et al with the system in 
Hunnicutt et al because the scanning of requests can increase overall performance of 
the system (Makinson, column 1, lines 49-53). 

Hunnicutt et al in view of Makinson et al teaches the limitations as recited above. 
It fails to teach if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Klots et al teaches a director keeps track of which resource 
is handling a request from a process (figure 5, column 6, lines 12-40). 
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Hunnicutt et al in view of Makinson et al and Klots et al are analogous art 
because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Makinson et al because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Makinson et al in view of Klots et al teaches the 
limitations as recited above. It fails to teach monitoring a series of operation requests 
associated with the registered process and the registered computer resource to 
recognize when the series of operation requests, considered together, has the effect of 
outputting the registered computer resource to a second computer resource. Phillips et 
al teaches monitoring and determining if a request message is able to access a 
requested file, it is widely known in the art a request may be made in various ways 
(column 27, lines 39-57). 

Hunnicutt et al in view of Makinson et al in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Makinson et al in view of Klots et al because maintaining data integrity is 
provided (Phillips, column 5, lines 56-59). 

Claims 3 and 12 disclose the method and apparatus according to claim 1, 
wherein the access right information designates an access right that is extended but not 
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defined in an existing environment. Hunnicutt et al further teaches using access control 
lists for different levels of control on the server (column 5, lines 8-25). 

Claim 21 discloses the storage medium according to claim 19, wherein the 
determination step, includes determining whether the access right is present by looking 
up an access right management table containing resource designation information that 
designates a specific computer resource, condition information under which the access 
right is validated, and access right information that designates an access right that is 
extended but not defined in an existing environment. Hunnicutt et al further teaches an 
access control list, which can be associated to a single file, or a list of files. The list 
contains which users have access and what types of rights are allowed to the specific 
user (column 4, lines 44-49, column 5, lines 8-25, figure 3). 

Claims 6, 15, and 24 disclose the method, apparatus, and storage medium 
according to claims 3, 12, and 21, wherein the access right information contains 
information that designates at least one of a right to move to another medium, a right to 
copy to another medium, a right to print, a right to write to a shared memory, a right to 
capture a screen, and a right to restrict use processes. Hunnicutt et al further teaches 
an access control list, which each file object has associated with it. The list contains 
access control entries, which defines what type of access the user has, one option is full 
control, which allows manipulation in any way possible (column 4, lines 63-67). 

Claim 31 discloses the medium according to claim 19, wherein the computer 
resource includes contents of a Web cast, digital broadcasting, and music distribution. 
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Hunnicutt et al further teaches the resources being on a file level which means each file 
object stored on a server (column 4, lines 44-49, 56-57). 

Claims 32, 33, and 34 disclose a system, control method, and storage medium 
for an information processing system constituted by connecting first and second 
terminals through a communication network, comprising: a storing step of storing a 
management table in a storage medium, wherein the management table provides, for 
each computer resource managed by an operating system of the second terminal, 
access right information representing access rights for outputting each computer 
resource to another computer resource, and conditions under which the access right is 
validated; an interception step of intercepting, an operation request for a first computer 
resource of the second terminal from a process in the first terminal, before the computer 
resource of the second terminal is accessed via an operating system of the first 
terminal, and if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource; a 
determination step of: monitoring a series of operation requests associated with the 
registered process and the registered computer resource to recognize when the series 
of operation requests, considered together, has the effect of outputting the registered 
computer resource to a second computer resource, retrieving from the management 
table access right information of the registered computer resource and access right 
information of the second computer resource, and determining whether the registered 
process has an access right for outputting the registered computer resource to the 
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second computer resource based on the access right information retrieved from the 
management table; a processing step of, if it is determined in the determination step 
that the registered process has the access right for outputting the registered computer 
resource to the second computer resource, transferring the operation request to the 
operating system in the first terminal and returning a result from the operating system to 
the registered process in the first terminal; and a denial step of denying the operation 
request if it is determined in the determination step that the registered process does not 
have the access right for outputting the registered computer resource to the second 
computer resource. Hunnicutt et al teaches an access control list, which can be 
associated to a single file, or a list of files, which contains information on which users 
have access and what types of rights are allowed to the specific user (column 4, lines 
44-49, column 5, lines 15-19, figure 3), an access cache which keeps track of access to 
resources (column 5, lines 27-37), retrieving access information from a table (column 1, 
lines 54-59), a check system which compares the access rights based on the 
information retrieved (column 1, lines 54-59 column 5, lines 54-67), and since the 
request has access to the resource the resource is outputted (column 5, lines 54-67), if 
a matching access permission exists then access to the file is granted (column 5, lines 
58-61), and if no permission is granted an error message is generated to the user 
denying access (figure 5). It fails to teach intercepting an operation request for a first 
computer resource of the second terminal from a process in the first terminal, before the 
computer resource of the second terminal is accessed via an operating system of the 
first terminal, and if the process holds the first computer resource, registering a 
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correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Makinson et al teaches scanning access requests prior to 
servicing by an operating system, the scanning includes requests for outputting a first 
resource to a second resource (column 4, lines 23-45). 

Hunnicutt et al and Makinson et al are analogous art because they are both 
related to controlling access to computer resources. 

At the time of the invention it would have been. obvious to a person of ordinary 
skill in the art to use the scanning process in Makinson et al with the system in 
Hunnicutt et al because the scanning of requests can increase overall performance of 
the system (Makinson, column 1, lines 49-53). 

Hunnicutt et al in view of Makinson et al teaches the limitations as recited above. 
It fails to teach if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
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second computer resource. Klots et al teaches a director keeps track of which resource 
is handling a request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Makinson et al and Klots et al are analogous art 
because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
of Makinson et al because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Makinson et al in view of Klots et al teaches the 
limitations as recited above. It fails to teach monitoring a series of operation requests 
associated with the registered process and the registered computer resource to 
recognize when the series of operation requests, considered together, has the effect of 
outputting the registered computer resource to a second computer resource. Phillips et 
al teaches monitoring and determining if a request message is able to access a 
requested file, it is widely known in the art a request may be made in various ways 
(column 27, lines 39-57). 

Hunnicutt et al in view of Makinson et al in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Makinson et al in view of Klots et al because maintaining data integrity is 
provided (Phillips, column 5, lines 56-59). 
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Claims 36, 38, and 40 disclose an apparatus, method, and storage medium 
connected to a terminal through a communication network, comprising: an interception 
step of intercepting, an operation request for a first computer resource of the terminal 
from a process, before the computer resource of the terminal is accessed via an 
operating system of the information processing apparatus, and if the process holds the 
first computer resource, registering a correspondence between the process and the first 
computer resource in a storage medium resulting in a registered process and a 
registered computer resource, and a transmitting step of transmitting the operation 
request intercepted in the interception step to the terminal; a receiving step of receiving 
a reply to the operation request from the terminal, wherein the terminal: monitors a 
series of operation requests associated with the registered process and the registered 
computer resource to recognize when the series of operation requests, considered 
together, has the effect of outputting the registered computer resource of the terminal to 
a second computer resource, retrieves from a management table access right 
information of the registered computer resource and access right information of the 
second computer resource, and determines whether the registered process has an 
access right for outputting the registered computer resource to the second computer 
resource based on the access right information retrieved from the management table, 
wherein the management table provides, for each computer resource managed by the 
operating system of the terminal, access right information representing access rights for 
outputting each computer resource to another computer resource, and conditions under 
which the access right is validated, wherein in the receiving step a determination result 
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determined by the terminal is received as the reply. Hunnicutt et al teaches the server 
communicating with other servers and clients using a standard communications protocol 
(column 3, lines 37-39, figure 1), an access control list, which can be associated to a 
single file, or a list of files, which contains information on which users have access and 
what types of rights are allowed to the specific user (column 4, lines 44-49, column 5, 
lines 15-19, figure 3), an access cache which keeps track of access to resources 
(column 5, lines 27-37), retrieving access information from a table (column 1, lines 54- 
59), a check system which compares the access rights based on the information 
retrieved (column 1, lines 54-59 column 5, lines 54-67), and since the request has 
access to the resource the resource is outputted (column 5, lines 54-67), if a matching 
access permission exists then access to the file is granted (column 5, lines 58-61), and 
if no permission is granted an error message is generated to the user denying access 
(figure 5). 

It fails to teach intercepting an operation request for a first computer resource of 
the terminal from a process, before the computer resource of the terminal is accessed 
via an operating system of the information processing apparatus, and if the process 
holds the first computer resource, registering a correspondence between the process 
and the first computer resource in a storage medium resulting in a registered process 
and a registered computer resource and monitoring a series of operation requests 
associated with the registered process and the registered computer resource to 
recognize when the series of operation requests, considered together, has the effect of 
outputting the registered computer resource to a second computer resource. Makinson 
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et al teaches scanning access requests prior to servicing by an operating system, the 
scanning includes requests for outputting a first resource to a second resource (column 
4, lines 23-45). 

Hunnicutt et al and Makinson et al are analogous art because they are both 
related to controlling access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Makinson et al with the system in 
Hunnicutt et al because the scanning of requests can increase overall performance of 
the system (Makinson, column 1, lines 49-53). 

Hunnicutt et al in view of Makinson et al teaches the limitations as recited above. 
It fails to teach if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Klots et al teaches a director keeps track of which resource 
is handling a request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Makinson et al and Klots et al are analogous art 
because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
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of Makinson et al because fewer system resources are required to manage the system 

architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Makinson et al in view of Klots et al teaches the 
limitations as recited above. It fails to teach monitoring a series of operation requests 
associated with the registered process and the registered computer resource to 
recognize when the series of operation requests, considered together, has the effect of 
outputting the registered computer resource to a second computer resource. Phillips et 
al teaches monitoring and determining if a request message is able to access a 
requested file, it is widely known in the art a request may be made in various ways 
(column 27, lines 39-57). 

Hunnicutt et al in view of Makinson et al in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Makinson et al in view of Klots et al because maintaining data integrity is 
provided (Phillips, column 5, lines 56-59). 

Claims 37, 39, and 41 disclose an apparatus, method, and storage medium 
connected to a terminal through a communication network, comprising: a storing step of 
storing a management table in a storage medium, wherein the management table 
provides, for each computer resource managed by an operating system of the 
information processing apparatus, access right information representing access rights 
for outputting each computer resource to another computer resource/and conditions 
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under which the access right is validated; a receiving step of receiving an operation 
request for a first computer resource of the information processing apparatus from a 
process of the terminal, intercepted by the terminal, before the computer resource of the 
information processing apparatus is accessed via an operating system of the 
information processing apparatus, and if the process holds the first computer resource, 
registering a correspondence between the process and the first computer resource in a 
storage medium resulting in a registered process and a registered computer resource; a 
determination step of: monitoring a series of operation requests associated with the 
registered process and the registered computer resource to recognize when the series 
of operation requests, considered together has the effect of outputting the registered 
computer resource to a second computer resource, retrieving from the management 
table access right information of the registered computer resource and access right 
information of the second computer resource, and determining whether the registered 
process has an access right for outputting the registered computer resource to the 
second computer resource based on the access right information retrieved from the 
management table; a processing step of, if it is determined in the determination step 
that the registered process has the access right for outputting the registered computer 
resource to the second computer resource, transferring the operation request to the 
operating system in the terminal and returning a result to a process in the terminal; and 
a denial step of denying the operation request if it is determined in the determination 
step that the registered process does not had the access right for outputting the 
registered computer resource to the second computer resource. Hunnicutt et al teaches 
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a server communicating with other servers and clients using a standard 
communications protocol (column 3, lines 37-39, figure 1), an access control list, which 
can be associated to a single file, or a list of files, which contains information on which 
users have access and what types of rights are allowed to the specific user (column 4, 
lines 44-49, column 5, lines 15-19, figure 3), an access cache which keeps track of 
access to resources (column 5, lines 27-37), retrieving access information from a table 
(column 1 , lines 54-59), a check system which compares the access rights based on the 
information retrieved (column 1, lines 54-59 column 5, lines 54-67), and since the 
request has access to the resource the resource is outputted (column 5, lines 54-67), if 
a matching access permission exists then access to the file is granted (column 5, lines 
58-61), and if no permission is granted an error message is generated to the user 
denying access (figure 5). It fails to teach receiving an operation request for a first 
computer resource of the information processing apparatus from a process of the 
terminal, intercepted by the terminal, before the computer resource of the information 
processing apparatus is accessed via an operating system of the information 
processing apparatus, and if the process hold the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Makinson et al teaches scanning access requests prior to 
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servicing by an operating system, the scanning includes requests for Outputting a first 
resource to a second resource (column 4, lines 23-45). 

t 

Hunnicutt et al and Makinson et al are analogous art because they are both 
related to controlling access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the scanning process in Makinson et al with the system in 
Hunnicutt et al because the scanning of requests can increase overall performance of 
the system (Makinson, column 1, lines 49-53). 

Hunnicutt et al in view of Makinson et al teaches the limitations as recited above. 
It fails to teach if the process holds the first computer resource, registering a 
correspondence between the process and the first computer resource in a storage 
medium resulting in a registered process and a registered computer resource and 
monitoring a series of operation requests associated with the registered process and 
the registered computer resource to recognize when the series of operation requests, 
considered together, has the effect of outputting the registered computer resource to a 
second computer resource. Klots et al teaches a director keeps track of which resource 
is handling a request from a process (figure 5, column 6, lines 12-40). 

Hunnicutt et al in view of Makinson et al and Klots et al are analogous art 
because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the director in Klots et al with the system in Hunnicutt et al in view 
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of Makinson et al because fewer system resources are required to manage the system 
architecture (Klots, column 4, lines 21-25). 

Hunnicutt et al in view of Makinson et al in view of Klots et al teaches the 
limitations as recited above. It fails to teach monitoring a series of operation requests 
associated with the registered process and the registered computer resource to 
recognize when the series of operation requests, considered together, has the effect of 
outputting the registered computer resource to a second computer resource. Phillips et 
al teaches monitoring and determining if a request message is able to access a 
requested file, it is widely known in the art a request may be made in various ways 
(column 27, lines 39-57). 

Hunnicutt et al in view of Makinson et al in view of Klots et al and Phillips et al are 
analogous art because they are both related to controlling computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the monitoring feature in Phillips et al with the system in Hunnicutt 
et al in view of Makinson et al in view of Klots et al because maintaining data integrity is 
provided (Phillips, column 5, lines 56-59). 

Claims 57, 58, and 59 disclose the method, apparatus, and medium according to 
claims 1,10, and 19 wherein the interception step further comprises intercepting an 
operation request from the operating system before access to a computer resource. 
Makinson et al further teaches intercepting a request from the operating system before 
access to a computer resource (column 4, lines 23-45). 
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Claims 7-9, 16-18, and 25-27 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Hunnicutt et al (US Patent #5,889,952) in view of Makinson et al (US 
Patent #6,971 ,023) in view of Klots et al (US Patent #6,920,475) in view of Phillips et al 
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(US Patent #7,136,903) as applied to claims 1,10, and 19 above, and further in view of 
Miller et al (US Patent #5,550,968). 

Claims 7, 16, and 25 disclose the method, apparatus, and storage medium 
according to claims 1,10, and 19, wherein in the denial step, an access denial error 
message is returned to the process without any access to the requested computer 
resource. Hunnicutt et al in view of Makinson et al in view of Klots et al in view of 
Phillips et al teaches the limitations of claims 1,10, and 19, as recited above. It fails to 
teach returning a denial error message. Miller et al teaches informing the user of an 
incorrect password (column 9, lines 32-38, figure 5B). 

Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et 
al and Miller et al are analogous art because they are both related to providing access 
control to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et al 
because security is provided for individual controls within a window of an interface 
(Miller et al, column 2, lines 8-10). 

Claims 8, 17, and 26 disclose the method, apparatus, and storage medium 
according to claims 1,10, and 19, wherein in the denial step, a successful access 
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message is returned to the request source process without any access to the requested 
computer resource. Hunnicutt et al in view of Makinson et al in view of Klots et al in 
view of Phillips et al teaches the limitations of claims 1,10, and 19 as recited above. It 
fails to teach returning a success message without access to the request resource. 
Miller et al teaches returning a window, as a user would see if access was successful, 
but with the controls obscured when access is denied (column 9, lines 41-44). 

Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et 
al and Miller et al are analogous art because they are both related to providing access 
control to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et al 

r 

because security is provided for individual controls within a window of an interface 
(Miller et al, column 2, lines 8-10). 

Claims 9, 18, and 27 disclose the method according to claims 1,10, and 19; 
wherein in the denial step, the operation request is converted into an operation request 
for a dummy computer resource and transferred to the operating system, and a result 
from the operating system is returned to the process. Hunnicutt et al in view of 
Makinson et al in view of Klots et al in view of Phillips et al teaches the limitations of 
claims 1,10, and 19, as recited above. It fails to teach converting the actual request 
into a request for a dummy resource and returning a result from the operating system. 
Miller et al teaches a system which returns to a step if the password entry subroutine is 
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ended and displays the window as a user would see if the access was granted but with 
some fields obscured to the user (column 9, lines 41-44). 

Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et 
al and Miller et al are analogous art because they are both related to providing access 
control to resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the incorrect password technique in Miller et al with the system in 
Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips et al 
because security is provided for individual controls within a window of an interface 
(Miller et al, column 2, lines 8-10). 

Claim 30 is rejected under 35 U.S.C. 103(a) as being unpatentable over 
Hunnicutt et al (US Patent #5,889,952) in view of Makinson et al (US Patent 
#6,971 ,023) in view of Klots et al (US Patent #6,920,475) in view of Phillips et al (US 
Patent #7,136,903) as applied to claim 19 above, and further in view of New, JR. et al 
(US PGPUB #US2003/0028653). 

Claim 30 discloses the medium according to claim 19, wherein if it is determined 
in the determination step that no access right is present, and access is denied in the 
denial step, an access right is permitted by inputting charging information. Hunnicutt et 
al in view of Makinson et al in view of Klots et al in view of Phillips et al teaches the 
limitations of claim 28 as recited above. It fails to teach granting access rights by 
charging the requester. New JR. et al teaches billing the user if the requester has 
insufficient credit (figure 4). 
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Hunnicutt et al in view of Makinson et al in view of Klots et al in view of Phillips 
et al and New JR. et al are analogous art because they are both related to providing 
access to computer resources. 

At the time of the invention it would have been obvious to a person of ordinary 
skill in the art to use the traps in New JR. et al with the system in Hunnicutt et al in view 
of Makinson et al in view of Klots et al in view of Phillips et al because the system 
provides added security by preventing unauthorized copies of programs (New JR. et al, 
paragraph 33, lines 8-13). 

Response to Arguments 

Applicant's arguments with respect to claims 1, 10, 19, 32-43, and 36-41 have 
been considered . but are moot in view of the new ground(s) of rejection. 

Conclusion 

The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. Dutta et al (US Patent #7,035,910) teaches providing document 
isolation during routing of a document. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Brian J. Gillis whose telephone number is 571-272- 
7952. The examiner can normally be reached on M-F 7:30-5:00. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Rupal Dharia can be reached on 571-272-3880. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 



Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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Examiner 
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